Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
net/http: document and protect against unsafe use of ServeFile #14110
Martin Lenord notes:
Normally ServeMux protects against this on accident, but it's not a good defense because there are ways around it and not everybody uses ServeMux.
We should instead document louder that it's unsafe, and add some protections against it.